CWE-125 · Out-of-bounds Read (page 4)
Page 4 of 99 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-77492 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally. |
CVE-2026-77491 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally. |
CVE-2026-72999 | Medium | 6.8 | 2026-09-08 | Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
CVE-2026-72977 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. |
CVE-2026-72976 | Medium | 5.0 | 2026-09-08 | Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally. |
CVE-2026-72975 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. |
CVE-2026-72952 | High | 7.0 | 2026-09-08 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally. |
CVE-2026-72942 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Windows Spaceport.sys allows an unauthorized attacker to disclose information over a network. |
CVE-2026-72937 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally. |
CVE-2026-72935 | Medium | 6.7 | 2026-09-08 | Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-71341 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to disclose information locally. |
CVE-2026-70579 | High | 7.5 | 2026-09-08 | Out-of-bounds read in Windows Mobile Broadband allows an unauthorized attacker to disclose information over a network. |
CVE-2026-70574 | High | 7.8 | 2026-09-08 | Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-70569 | High | 7.8 | 2026-09-08 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. |
CVE-2026-70145 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. |
CVE-2026-70124 | Medium | 5.9 | 2026-09-08 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network. |
CVE-2026-69930 | Medium | 5.9 | 2026-09-08 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network. |
CVE-2026-69929 | Medium | 5.9 | 2026-09-08 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network. |
CVE-2026-69895 | Medium | 4.7 | 2026-09-08 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally. |
CVE-2026-69875 | High | 8.0 | 2026-09-08 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network. |
CVE-2026-69862 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows Wireless Wide Area Network Service allows an authorized attacker to disclose information locally. |
CVE-2026-69844 | High | 7.8 | 2026-09-08 | Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-69808 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally. |
CVE-2026-69803 | Medium | 5.9 | 2026-09-08 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network. |
CVE-2026-69760 | High | 7.5 | 2026-09-08 | Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny service over a network. |
CVE-2026-69741 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally. |
CVE-2026-69739 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network. |
CVE-2026-69734 | Medium | 6.5 | 2026-09-08 | Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
CVE-2026-69717 | High | 8.0 | 2026-09-08 | Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network. |
CVE-2026-69715 | Critical | 9.8 | 2026-09-08 | Out-of-bounds read in Windows Direct Show allows an unauthorized attacker to execute code over a network. |
CVE-2026-69689 | High | 8.0 | 2026-09-08 | Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges over a network. |
CVE-2026-69679 | Medium | 5.7 | 2026-09-08 | Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network. |
CVE-2026-69637 | Medium | 5.7 | 2026-09-08 | Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network. |
CVE-2026-69630 | High | 7.0 | 2026-09-08 | Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-69627 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows Remote Desktop Licensing Service allows an authorized attacker to disclose information locally. |
CVE-2026-69619 | High | 8.0 | 2026-09-08 | Out-of-bounds read in Windows exFAT File System allows an authorized attacker to elevate privileges over a network. |
CVE-2026-69618 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information locally. |
CVE-2026-69617 | High | 7.0 | 2026-09-08 | Out-of-bounds read in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-69616 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to disclose information locally. |
CVE-2026-69609 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally. |
CVE-2026-69591 | Medium | 5.7 | 2026-09-08 | Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information over a network. |
CVE-2026-69572 | Medium | 5.7 | 2026-09-08 | Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information over a network. |
CVE-2026-69568 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to disclose information locally. |
CVE-2026-69562 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network. |
CVE-2026-69561 | High | 7.8 | 2026-09-08 | Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-69549 | High | 7.0 | 2026-09-08 | Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-69538 | High | 7.8 | 2026-09-08 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally. |
CVE-2026-69532 | High | 7.8 | 2026-09-08 | Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-69527 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows USB Mass Storage Class Driver allows an authorized attacker to disclose information locally. |
CVE-2026-69509 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-69505 | High | 8.0 | 2026-09-08 | Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network. |
CVE-2026-69504 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. |
CVE-2026-69494 | High | 8.8 | 2026-09-08 | Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network. |
CVE-2026-69493 | Critical | 9.8 | 2026-09-08 | Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network. |
CVE-2026-69490 | Medium | 6.8 | 2026-09-08 | Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
CVE-2026-69483 | Medium | 4.7 | 2026-09-08 | Out-of-bounds read in Windows Image Acquisition allows an authorized attacker to disclose information locally. |
CVE-2026-69458 | High | 8.0 | 2026-09-08 | Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges over a network. |
CVE-2026-69457 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows USB Driver allows an authorized attacker to disclose information locally. |
CVE-2026-69450 | High | 7.8 | 2026-09-08 | Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
CVE-2026-69443 | High | 7.5 | 2026-09-08 | Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a… |
CVE-2026-69428 | High | 7.5 | 2026-09-08 | Out-of-bounds read in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network. |
CVE-2026-69427 | High | 8.0 | 2026-09-08 | Out-of-bounds read in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges over a network. |
CVE-2026-69393 | Medium | 5.7 | 2026-09-08 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information over a network. |
CVE-2026-69390 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally. |
CVE-2026-69381 | Medium | 4.6 | 2026-09-08 | Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack. |
CVE-2026-69376 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally. |
CVE-2026-69373 | Medium | 6.7 | 2026-09-08 | Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
CVE-2026-69372 | Medium | 5.7 | 2026-09-08 | Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over a network. |
CVE-2026-69369 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally. |
CVE-2026-69367 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally. |
CVE-2026-69365 | High | 8.0 | 2026-09-08 | Out-of-bounds read in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges over a network. |
CVE-2026-69353 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows Text Shaping allows an authorized attacker to disclose information locally. |
CVE-2026-69345 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally. |
CVE-2026-69344 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally. |
CVE-2026-69343 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally. |
CVE-2026-69342 | High | 7.5 | 2026-09-08 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. |
CVE-2026-69340 | High | 7.1 | 2026-09-08 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network. |
CVE-2026-69334 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network. |
CVE-2026-69332 | High | 8.0 | 2026-09-08 | Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network. |
CVE-2026-69329 | High | 7.5 | 2026-09-08 | Out-of-bounds read in BranchCache allows an unauthorized attacker to deny service over a network. |
CVE-2026-69324 | High | 7.8 | 2026-09-08 | Access of resource using incompatible type ('type confusion') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally. |
CVE-2026-69318 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally. |
CVE-2026-69317 | Medium | 5.7 | 2026-09-08 | Out-of-bounds read in Remote Desktop Client allows an authorized attacker to disclose information over a network. |
CVE-2026-69312 | High | 7.8 | 2026-09-08 | Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-69308 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally. |
CVE-2026-69303 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally. |
CVE-2026-69295 | High | 7.8 | 2026-09-08 | Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-69286 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to disclose information locally. |
CVE-2026-69265 | High | 7.8 | 2026-09-08 | Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-68898 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Windows iSCSI allows an unauthorized attacker to deny service over a network. |
CVE-2026-68891 | Medium | 4.7 | 2026-09-08 | Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally. |
CVE-2026-68887 | High | 7.5 | 2026-09-08 | Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to deny service over a network. |
CVE-2026-68881 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally. |
CVE-2026-68874 | Medium | 5.7 | 2026-09-08 | Out-of-bounds read in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information over a network. |
CVE-2026-68849 | Medium | 4.7 | 2026-09-08 | Out-of-bounds read in Windows Bluetooth Port Driver allows an authorized attacker to disclose information locally. |
CVE-2026-68784 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. |
CVE-2026-68781 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. |
CVE-2026-68780 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. |
CVE-2026-68779 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. |
CVE-2026-68778 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. |